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[ # ff it # <d m m ] 
[ m * * i ] 

KT # BfJ v fc # l§ T S ® lc (|$Lt^5xU'<- *d>r*roiififE5fe^£tufE^r*£<£»IWZ>ffi 
»St5i^i s tlif tiftf L, :n^O^)S t5 * * *• HI SU -T 5 fc * \z. fu 15 ^ u - 9 

a»rrtriD«**i£«t-3**©i*«ffl*Bij»* (id) sfint 

£ § It fc I Dlrtt5^lrfl»rL, r <b <7? 1 A * fc 14 ^ ft W ± © fg * A* ff "J £ §: It T 
& t> N # , iffiffiSO K7©o y ^, ^{iM^<^a*&v — J* ViM <V y b <D 0 <D 

1 o * fc 14 * ft W ± £ H tt 1" 5 it # S £ , Sr-&tf-4:S:»«ti-5^i"<-^»« 

[ft 2 ] 

iiu IE 1* {« £ ft fc |% b i£ t;: * < itul- > SfJfe^^<75ID(D«cSr^cx.5)irl5] 

^t;ir©*flfc»©*igO*:8J(E>A&&«fc»L, str IS /i» r A* W IE IP ii £ ft fc PS ^ l£ fit * b fc 
fc * , SlPfrjft©**©* ? > hii^S^^ro I Df lr?I^T, $ f3l;*«tl»*i:rot 
to <£> A & §1 ^ fc m i'i if n £ <Q h /J> $ v A> £ W Wf L , t* p i *) t)/J>$(ttltf> ml IE Pi * 

*Tl-5#S££tf:: fc £ # m fc "T 5 f * * « l IB tt © ^ u^-^fitlggo 
[ it 3 ] 

iff IE ft # Aft S # S 14 > I s ffi £ ft fc PW * (c J3 T ¥F «T CO ft ^ Hk & tu IE r~ ^ P> T • L fc * 
^ 7 7 - ASrD^^-r^^^-g-tf - fc t5W*5 1 IE » <£> x. u^-^^fl^So 

[ f ff * « 4 ] 

WIB;fr|t(H4»fl5**n361I:W^ MIE*>rM;if£e£ftfc'>fj:<fct>lo<aftf1s&$H3§&fc, tu IE 
*»fcR«£ftfc4>ft< fc t 1 o<£>»ftsl**a«fc, £ ^ tf c\ t ?: #f i t 5 II 1 1 1 IE « 

[ff 5 ] 

ifle#rtH!fettfe**Di*1I:tt. \* v zf Z. i: t #i t t 1 IB * 

[ff * 41 6 ] 

Dtr ie Ky^7-»ffi&Stt, m ie *» r m r « $ ft r ^ 5 ^ fc ST^iiSti-r^M**! sib* 
I f t * m 7 ] 

KT # M fc :|K US fH « f£*:LT ^5x1^^- ^^rrroStflES^irMIEd^rrir^mrotti 
A n lc f£ it <b ft x i>oiSxv/< - ^^rrtcoSttroafttt^*^^ hlrtl#t5*l*l 

»ji£i--5***s**t-e*i/** l , rnfewfctjsi-ss^&KBij-rafcfcfcffisea: i"< — * 

*>rrt-CID(t»«ra6flli-S«»«>jmilrffl«9J»-» (ID) 8 i i > 

llu IE # £ > h t fltf IE I DittSf Lt, K T d s ^ lc US C t ^ ^ § t* bu IE /5 s A s S 1 
L t 5 fc # . WIE^r'rtT-^^'t'ro^S^^tiflE^rwStff^^IiWLTl/^ 
d» «r *U Wr L , $ b N StrfEID^^^ttllE^^vht^Iti^i-SrtT'HufE^rrttCTfeSg 
B © * * /i 5 ^ 5 ;&» £ W 0r L . IU IE # W + <F> ± X <D m * ^ 5 su IE 51 ft & Sr S It T ^ 4 PI 9 

Aft S # © 4: , *ttf r i: Sr#» i t 5 x i/^< - :? f igf 0 
[ n * * 8 ] 

K T AS M fc # ti T* * m I- f^ * L X ^ -5 3i u- ^< - 9 r «0 tu IE * » t wi IE r t <D ffi <D ffi 

a p i: t it b ti , ^oitaxkK-^^rrtofgs^itwi^^F^sits*^ 
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A>rrt-eiD«-g-*iHfS"t-sa«ro««ffl«i9j## (id) mmmmt. 

£ g It I Dt*"-f-5*»SrWWfU, rlxferoiA*fc»4'**b£H±©S£#n : Rr«:£tt"C''* 

4 ^#'p t , jtEB*OK70Dy^ <i M ^ ^ il & . 77-i>tiroir 7 ^ *. W 
1 o * 14 -t ti MX ± Sr 1- 5 if tea # gfc t v * £ * , ItlEM-i-MS^glS, mi IE # * 
V h t W IE I D t \Z JC £ L T , K7^^^|:H ctV^iV^ifStlfe^r'^Silcfl* L 

L „ £ fc: , WIE I DOfttWE* h i Sritftti r ti?i)(lEA>rrtli:*aB«)*¥ 10 
*s ^ 5 & *J »r L , HrtE#«*<&£T<a**asiHlflEj^lT^&gttT^*^R?) 14 ffj IE ^ 

[13*31 9 ] 

(a) ii^O^-*^{crtxb£0*^lcSiJ«9^T^nfcI D^^{S-r5^^fflS«5r-^x.s 

(b) *»fc*<Btfc3iU-«— ^*»rrtTWIEii1lt<0#3ft*© I DSrJlBL, 

( c ) ffi IE * # T* * g # ffi IE r Cj T * L- & K: x »54*«©IDi;lBL 

(d) 3$3#*groiDfcW!Eii^<Z)?i|!gOID££fcbigfcLT, fltT IE * # T llfj IE w b 

(e) iHrflEj&»r&***fcttT*i-S**<&»fls«r*fe*nLT, flriaa»rrt0>**8:©iitt 20 

(g) mIfE^»T*tiJfE*^r:§rT*bfcmIIE^^W 5 ^ tfj IE fit « I- A 5 If ^ tf 5 ft V^ * g *p 
v^A^^i^JW I* bJ * 5 * V * £ /5 s v^fc lc li s illEPl*© K70n y ^ , ^ ii M 

5x * Jil 4§ <73 « H ft 0 

[ ft * 31 1 0 ] 

XT y7 (g) 14 , 77-A^B|^frt^^tfri:!r#'(ti:t5ffi*59iEtcOxU'< 30 

- * 51 *& « « * & 0 
1 1 ] 

X T y 7° ( e ) 14 , fiu IE d» £T (C IS S £ tL fc i ^ * < t fc 1 O (O » f£ fco # t , HU IE * Ws \Z. K 

5 * ft fc 4> 4 < i fc io©«^*»St, ^ttfSttiotSff^HSrirSr^itit 
5fl*« 9 IE * © ^ 

[ 1 2 ] 

[ft 3ft JS 1 3 ] 

(a) a»0#*«t:ftbO*SCflD ^ T <b ft fc I DSriH«-r5SS«rffl3S«Sr4-x., 40 

(b) *»K*<*i»cau"<-**»rrtic?sfriEffl*<o#**©i d*:*bl, 

(d) ?5^.#*^<75IDtBulEji^c75S^c73iDi:%itt5fUT, W IE * # T- Hu IE ir- w* b 
T*LfciiS<75»§^ 1 D £ St B L , 

( g ) m ie m m r- nti ie *» r * t * l fc atr is m & <r> o *> v m ie m a ic a 5 §* *i & tz ^ * ^ & 50 
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-5 5 £ ¥U »T L , fF "5J # t£ V> £ AH^ » -g- K »4 , m IE Pt f£ <£> K T CO o y 9 , t 5 <i * 
~- CO 5* i& , T7-Atffi©t ? hC05*>C01oSfci4 ; etliU±Sr^ ; ftL, 
(h) ^tT©fcfet-*»^iin5Wlcau1E^r*rt<D^^:^cco*"?^hi:, tu IE /5> rT ft co I 

( i ) JI^iOfcfcKiSli&SrfiftSlitr I D £ fll SB L , 

(j) tie* y h tiffi i Dici<3t« Sfj|E^;i'rt<osi£TiiiFlE&fTrot^£§tt-c<^ 

ft^l$iU^5i^fl|iL, ^ ^ S T V ^ ^ V ^ ^ $ v •> tt (i* Su IE d5 ffj IE 3S tf ^ It 5 

i n # m i 4 ] 

(b) »fT<Dfc»fc*»S:l**bailrK#**©I D £ 51 B b , 

( C ) mn<Dtcfricmm&MtiZfftfcmftfa?ft<Dm&%[.(Di} $ > h t . m ie ^ co i 

(d) |fl!5* > h t 1012 I D (C i o T, SfIfE^r^!CO^^Titlf551tf(DrFpJ^S:(tTV> 

* v> * 5 d> ■& ¥U Bff L , PF "5J 4- S it X V> ft v * & 3 s v wi IE r* a* ffi IE » ?t €r fr 5 

[ 0 0 0 1 ] 

# 38 91 I* , ^ u — ^ tB A 9 tSAijit/i u^<— ^iw±oT t* ;K£> pi co * Ws I- ffl A 

[ 0 0 0 2 ] 
[ It * ft « ] 

k«sftf>hTv^5. * * i4 , — «u:*i*siJ3ft# ( r f ) (ir) mmmtt & 

« ffl L T * gi] # (ID) ^%t5iSfflgI5rHSt5. *fflIAi!*t5 1 9 8 8 ^ 
6 7 Bt±iiICO*ll#I i Ftfcl^^0 9/1 1 1, 3 5 5 # T? tt , ^U-s-^iggii. SI ^ 
gE&A^^ftfcfTStePfPflMcj&^-rSJ; 5 tc *] *? mxbtitc^v-^-fUW-v)^^^-? 
t**Lfc»^tmS:»Bt5. L 2» L , {£ * CO Si ■ T* tt , ^u-^-^fOfUfflfFnT-Sr* 

■j-.s**a*fi : Rr©fcv**-e"F*L;fc»'fi*, *fc»!»irffla6iiSri*fc*v^**a*fF"Hr*< ^ 

[ 0 0 0 3 ] 

[ 38 m co ffl m ] 

* |g 91 co @ m ic , ¥F "5J CO ^ ^ *s , M fr tf s ftiJ PS $ J- u -< — 9 — co m * Sr I* tz i§ 
-a- , Sfctt^il^tLfcpgfKcoS^T^u^-^^T^Lfc^-g-tcirtv^SltE-rSi: 

trhSr*Bt« - i £ $ tf „ 
[ 0 0 0 4 ] 

# 3§ 91 K J; 5 i: * t'/KO^^^nfcPt^ro^^i^^ — ? (D An icmv h in tcjj fate. Wi YE & 
*n fa f± , 3- u — * # KTOHv^fcttffitff* Ltv^S t # I- ^ u-<-*£**:fcJ;tJ<T 
tt^l^S^ftiX- 5H&E<E>**«Ctf>#£>'h&i»#i-5. SI«fflcoiDi£{fig«£* 

fct'<73#^cogE*i»^*^^u^ — ^ tSot^Si^Siill^ti^ 7 ah h- T # li pg 

S^ttfBl^Wt^S^co I D#-S§-<Dtt;i£fcJ;i9, !*^<0&^A*fctt*«fB<0A#iefii 

n-y^L, ti*K*»t5wi:#Tf*5i:tt)l:/4fcH:7 5-A«f tty l-t5A> 

[ 0 0 0 5] 
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I D CD & (4 . I Dlrf LT^Ji^S^/iSit Lt^5*'?r*t. Ztlb<niD\*.&ffi 

«r sr s it fc ^ k m m l , ? t * n n t>* r & tt ffl « it k -r 5 „ 

[ 0 0 0 6 ] 

1 o co H J£ #J T* 14 , ARtS KTABOV^f ni>OfllOift«*P«i, su^-? K7AP 
w ^ f *» ffifl w ®) ft *o m t s roi'*,e,(OitiUoTi^iJstDl^jai^5^(cJ: 

[0007] 10 

* 38 e o m <d g n , & « > *j j; xf f u ,s fi , *&w<om*&}nMm\zf>ai-zuT<Dmmte%i 

m *3 4 t/ ID B 4 o T 4 9 W ?> o 
[ 0 0 0 8 ] 

[!6WSrmfei-57t«)W*Sw^ffi] 
H l £ # fi8 1" 3 <t , -^oii/x-i' 6, 7 # , a»r»f^*9«rfl|*.**»r*8 4:, # -f 
K U - 1 1 t , 5l/-< Kl^-/W*tt5ft^V^*3t 9 1 3 t, F7 1 6i, & *t H 

« £ *l , ii/^ - ^--ff)illA!3IJ:#^KK720?rILttTfcix5o - - * X <D tft W (4 , 
ttStE©*-!"* — 

[ 0 0 0 9 ] 20 

# 38 93 T 14 , ff»T«:*1-.5£-C©**i&*, *HSi--5**fcW9S-CC>ixfclD##Srai« 
t5«*«SSfflSl^«ffit5„ lOJ: 54 I DI4, y y ^ ^ K4ifP*ffl S 

tt 5 ) §»R F I D*fc(4^coRF^I R iliSi t5 : i: is-e§ 5, 
[0010] 

*3Bffi"Cli, # ^ u- -< - -* (4 . ffi*©t©i:t5 w 5-3sf©i^»j3Hl2 2 Sri 

X. T :fc 9 , itLfecofiifes&fciSfi. |gt5lll 8ftt)i<, 7 
©l^ro^Sr^*nf5J:5 4iS^'^ ->*tt5 e §f i l 8 ictt, t£?fccQt><oi1-3 

ixbcoib^^*q-ggfi, xi/^- * 6 , 7 rt©B^tl±4< , ^^18lcfclt-5»)f^O^Sr 
ftSspfSi 5 4!iS^^-v?rf t5„ Mz-&,m&&mmi8fab^i"<-?7finz& 30 

itst, n m *o # 2 3 i± N ^*q^2 2 i oftiMit ^s«t?)©T\ m&tfmM*fo 

iZ#Wl LIZ Z. k ZtlS. #1 X. »4\ |$j!i^-^7 5r|»)5i 1 » f£ tfc *D » 2 2 

[001 1 ] 

Hy7'7-iffljl*l»2 5tlit*59. r©lf t*0Sl±, A P W ± & t* CO il ft S 

k tsj »* e> h s t t h icft <d m s. m -r z> 4 ? \z &> % % & & <d & & x & h *i nx &> z . 

fflffiiz, iu^< - ^*-;n 8i»f)#H8 K72 OSiiS^ii/^- ^-.©APl:^ S£ 
*rotOiti:i:!J!ftiK?7'5-!i^t(tJii8 2 6 Srlllt5:t*tft > 40 
■Jffl Si 14 , APW±ne^w3i^)7 , <C&et-l3:ttbti'5 £ t t>(c*^0^(D^^co^J£{ciii-5)J; 
?lz '&&<n*mxWltt°jmxtb2> 0 X. If , xwx-^r 7 iclfiJiif f5 t > 

«*n»2 5^fB#Sr«ttL, ;hl:»LTtl*iiS2 6 lilt f Sr ift L 4 v\ £ fc, #J x If 
, 7 A^f ?iSflt) 5 t, ftjai8 2 6«s«t*ft«L. mi;*tLT^3a^2 

5 14 ft ^ £ ffi L & ^ „ t£ o T , & *a #g 2 5 5> o « * tt , %k & & m & * ft \z & ®} VtL z 
tSr^U, ***n&2 6*»G><0{t*B:, ***ST*3EFlS)lc^WiLfcr.i:Sr*-r. ItJats 2 2 
, 23, 2 5, 2 6 14, #$8§IJ©«iiB(ia3#J!nfcW«£«#i-*ii:t>Kai38e ! 3* 
fc!4ffil©@M0>fc*M£3li*»*jiaEWlC#*:' h-T-Sfc i6 K f ij ffl *T f£ T* £> -5 0 1^*0^2 2 
, 2 5 14, tf ' CO 4 1 I- IS H $ tl fc 7 s n -fe j, -y- £ ^ ft y - :/ A* £ fc (4 ^ U- ^ - -? <t t* A- £ (75 
BtffiV^il5ll!!OlfiKfttJ:oT»ttSix5. m*P» 2 3, 2 6»4,m^*fc(4tecO 50 
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[0012] 

B3*#Slt5i:, «jai» 2 2, 2 3, 2 5<ai^rfta>iKI&i-5'> — K^Tas^jg^: 

5^3iS:^Lti^/p^7A|:S5 e «ftiS 2 2, 2 3, 2 6 ©^f hi^ 

H * r 5 ^ - K * * T # , **^T**lftfc»ftbfc-i:Sr*ftiUfc»*fc, T * f 'J ii * 

3 2 C J: o T , ^7^/3 3 t*P A *5jj/>^s o T'n^JAtt, AP*34S:i 
oTS|KI^^Mt'> b /v - ^ > K it L , x * b 3 5 l: iotxi/^-^^^U 
ti5^S^S:«»ft5o » Jfc t tt , K T £r 03 C > a> o ^ - ^ ^Sof:^lt^ U ^< — * £ 

^S§B^Hfct#tc?ffc|llc:iELv^^^^ b T* H *& £ ft 3 4 5i:t5 e xu^-^^ffij 
ft ft l>> l£ t4 , f^b35(053ew8ftiaot, SD*3 U^LT|0^o^5A 

it -r 5 o 

[0013] 

B4t#It5^ * IS « Sr m M -t 5 fc ft H tt m ft S fif * if « IS * ^5 tt?4 * ? 
7A^*^tLtfc9, 3 6 5:Io tlfff it^yv^-f y-A5 : ^t^o $1 

(7) y * b 3 7 *5 , S ft T =7 - A & ir y h*ixfc36»5* a Sr«Wfi"5o b £ 

Jit^4v>(Df s x * b 3 8 , ^ u — ? KT^^^t rilStv^^ 5 a> & ¥U »r f £ o 

^ L T ft ^ 7 s d ^ 7 ^ 5 0 K T # '> * < £ §fl # W H ^ T V> 5 4§ * K 14 , *r * b 3 
8 <D & 7£ <D fa & \z. & , x ^ b 4 0 1 L t K T t t ^) 0# F^l 1® ^ iff t ^§ ^ Sr « 
Btfi. B# IB 3S m tt . inffltttR^fiSHTSttTv^ftv^-e, b 4 l Ttl^titlff 

■c *> s a* 5 a^ S: « Wf i" 5 o n $ ft t ^ ft it ft tf , i 4 a »9 a 5> ^ I ^ ^ 3 9 Ir ^ L 
-c^-r^;*£ft£o i^t, i^n $ ftfciiff-r 5 fcftti, — ^>a^^v^T^tT £ ft x 

5/ ^ 4 2 -C R ^ flt It y 7 ? £ -fe 5/ b -T 5 o S±ff±77^tts « C 7 5 ^ * !X b S ft 

5 0 r ft 4 9 > xu^^^^^t(DS?^^(0#£^f I^ftfcItTtcrilTl^^S 
/l. — ^ >- 4 3 1 1 ? O I D as — y > ^ £ ft . * x :y ^ 4 4t?t I £ IS ^ L fc I DcO^cir 

m l < -tr y ht5e tit, u- y /i- — ^ v 4 5 t m * to i d *■ hb ^ l . ( # 3t <a ft m * »c 

fcljiftg^iu^-?, ifcttfli©*ft-CjS3tJix5) WS^jlfffcBBi-SWerSr^i" 
5^Sr«Bt5o ^Tc0^^aSaS^fl^^T^ ; ft'LTV^5^0-rftv^^^^^l N ^ b 4 6 W S 
^coSI^J:^T7 7 0 49iiiLT ( KT^iv^t ^^^ic^^fcbf ) K7*3S 
ft!l ft Ic M < t t t lu , otxu^-? tft^f<o4v^A***Ltv^5iv^ 7 

^ ^ >• £ L , x i/^-^HF|itoti*lfcA^x u^< - ^ a> ^ p§ 19 K^fflSU 
rftS-^-fo T^-^v^tciS^T. F 5 1 f e^rpllii^Kfit^SJi^flitS 

o ^RIMIS18tt> f] 3W <fc ffi -C 14 * fr £ ft T W ft ^ <£> T? . b 5 1(D^^(D^^:^X V 

N ^f^52CSlTPfll^'<-7^git5^H(^ 7 7 C 5 3 T^^fllll^ 

SlfT^tfcS: t 8:*tl§W»l7 *t 5/ ht5 fl t^t, I 9 3 9 ^LtffiW 

[00 14] 

d 4 — f y^J:lii5J:tl:tt, x^b3 7, 3 8 Willi, 5 £ £ ft 5 a* , ^0 14 

x ^ b 4 0 as # * t ft 5 , x ^ b 5 5 -eft n m m as ^ ra §o ft t * o t ^5 a* 5 a> £ w if i" 
5 o ft m «i ft t* ft ft t£ ' -9- * — ^ >- 4 3 , 4 5 tt s^si>^- y ^ ^ $ ft 5 t t t 

\z m £ * ft > fe^i: LTIT pJ^^^A^S* ttv^I^C li, h 4 6 coggco^S 

\c X t) , ^ r 7 7 C 5 0 T g (/ O i i> 1 ? ( : i t 5 7 t > ^ 5r t f ^ o Jliftft^^f 

A -c |4 , T -T V > ^ 14 . 7°n t -7 f T'i 4 co/u-f > lei ^ ii lillt 6^l:St?)0^ F^l 

4 «9 coo#ra1S:^L, 7t?>7^|!)SJix5^T7t^ 77^I!)IJii§ J; 5 
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ic r i- •> > * 7° o * * # M- lw ft ft £ ti , !^<^<5jgy4^iiiaic:*i^T^7 L y7 , 5 0 t}5 ft g i; 
45. h 5 1 4 9 , * ^ y ^ 5 2 , 5 3 */<^/<^$ilTSll^3 

5 505^0^1, 7? M 6»f log*, fcitFf^ F5 1 (DtS©8*l- i •) , ff 

pj o 4 v m & & ± x i v - $ r & h t * ~t 5 a» Fai m ? & ^ m $j ax t 4 5 s -e j& # 

15. WIW*^^asfl*III]#;h,lc4ofc£iEJ£-j-5i:, E4cOyu-^>'(75iiiitcJ:'97 i ^ h 
4 Otx^ h 5 5(Dig*asitj£i4?>, * X y 7° 5 6 fltf 7 7 - A J» h £ *b 5 . £ 

fl*Jt5„ ^ 7*5 7, 58t?, rFBj©*VMDt> lD©ti©*v^Sr!2 10 

tg -f 5 - t 7)5 T* £ , rixlli f)7 7- AA!t7 h Sfttlft |tV^T7,T y 7* 5 

9 f^F ffl FII 7 7 y * !i ir -7 h t 5 „ 0 4 yro^Olilli, 7^ f 3 7 ©#£<D 

* * ii •) , 7^ h 6 oroSSro^Iic J; 0 , ± x <o iv - ^ > # << * £ *b , f 11^ 

•y7*6 1T'77-At|i5|jt7 h £ tb 5 » 
[0015] 

If ^ 4 b^ I DSrtt5S$^ii"<-^^r?rT*Lfci:fiSt5i> HI 4 <73 /b- — ^ > 
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ELEVATOR WITH ACCESS SECUWTV 

Technical Field 

This invention relates to monitoring authorization for persons gaining 
access to elevators and floor landings of a building by means of an elevator. 

Background Aft 

For security purposes, it has been known to prevent elevator start-up 
in the event that an unauthorized passenger has entered the elevator. 
Typically, passengers carry portable devices which emit identification 
numbers (IDsl usually using RF or IR electromagnetic radiation. In commonly 
owned, copending U.S. patent application Seriat No. 09/1 1 1,355, filed June 
7. 1998, an elevator system determines when a passenger has entered an 
elevator, other than the elevator assigned to respond to an automatically 
entered, destination call- However, no prior systems determine if a 
passenger, generally authorized to use the elevalor, nonetheless exits on a 
floor for which the passenger is not authorized, or if a passenger without a 
portable device may be impermissibly on an elevator. 

Disclosure of Invention 

Objects of the invention include determining when a passenger, not 
authorized to do so, attempts to ride an elevator during a restricted trip, or 
exrts an elevator onto a secure floor landing: and determining when 
passengers without IDs are on or exiting an elevator. 

According to the present invention, directional motion detectors at 
the entrance to each elevator on a secure floor of a building, when an 
elevator is present with its doors open, count the number of passengers who 
enter and leave the elevator, to maintain a current passenger count; a poll of 
passengers wearing portable, ID-emitting devices, determines whether 
unknown passengers and which particular known passengers are in the 
elevator, by default determining if unauthorized passengers have left the 
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elevator at a secure ttoor; a comparison of exiting passenger ID numbers with 
authorized passenger ID numbers will set an alarm if unauthorized Of 
unknown persons have loft the elevator at a secure floor, the doors on the 
floor may be locked, security personnel notified, and/or an alarm condition 
5 set. or sounded. 

In furthor accord with the invention, passengers boarding and exiting 
an elevator are counted; a count of IDs sensed indicates if passengers 
without IDs are on board and IDs are compared with authorizations on secure 
elevator trips to restrict elevator passengers to those authorized for a 
10 particular, secure trip: otherwise the car is disabled. 

In one embodiment, morion detectors on either side of the hoistway 
door entrance and on either side of the elevator door entrance determine the 
direction of passenger movement differentially, depending on which devices 
sense motion first. In a second embodiment of the invention, doppler motion 
15 detectors (of the type used In stores to prevent exiting through automatic 
entrance doors) determines the direction of passenger movement. 

Other objects, features and advantages of the present invention will 
become more apparent in the light of the following detailed description of 
exemplary embodiments thereol, as illustrated in the accompanying drawing. 

20 

Brief Description of the Drawings 
Fig. t is a stylistic, schematic, plan illustration of a pair of elevators 
utilizing pairs of motion detectors in accordance with the Invention. 

Fig. 2 is a stylistic, schematic, plan illustration of a pair of elevators 
25 utilizing doppler motion detectors in accordance with the invention. 

Figs. 3-5 are illustrative, functional flow diagrams illustrating 
principles of the present invention. 
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Beet Mode for Carrying Out the Invention 
Referring to Fig. 1. a pair of elevators 6. 7 each include a cab 8 
having a car operating panel 9, guide rails 1 1 , counterweights 1 3 with guide 
rails 14, and doors 16. The elevators are disposed in a building 17 to serve 
5 floor landings 18, access to which is gained through hoistway doors 20. The 
description thus far is of a conventional elevator system. 

For this invention, all authorized passengers carry conventional 
portable devices that transmit ID numbers assigned to the corresponding 
passenger. These may be passive RFIDs (such as are used in gasoline 
10 stations) or other RF or IR transmitters. 

According to the Invention, each elevator has a pair of motion 
detectors 22 which may be conventional, having a sensitivity pattern which 
causes them to sense only motion on the elevator car 6, 7. end not on an 
adjacent landing 1 8. Adjacent to the hoistway doors 20 on each landing i 8. 

1 $ there is a pair of motion detectors 23 which may be conventional, having a 

sensitivity pattern that causes them to sense motion only on the landing 1 3, 
and not within one of the elevators 6, 7. As a passenger moves from the 
landing 18 into the elevator 7, for instance, the motion detectors 23 will 
provide a signal prior to the detectors 22, thus indicating that passenger 
20 movement is in the entering direction. As a passenger leaves the elevator 1. 
for instance, the motion detectors 22 will provide a signal prior to the motion 
detectors 23. thus indicating that passenger movement is in the exiting 
direction. 

Referring to Fig. 2, each of the elevators in another embodiment of 

2 5 the invention have a doppler motion detector 25 disposed in a suitable 

position, such as above the entrance, which may be conventional, and which 
may be mounted in any conventional fashion to suit the particular installation 
involved. Similarly, each entrance to an elevator from the levator corridor 
18 through hoistway doors 20 has a doppler motion detector 26 disposed in 
30 a suitable position, such as above the entrance, which may be conventional. 

- 3 - 
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and which may be mounted in any conventional fashion to suit the particular 
implementation of the invention. Passengers entering the elevator 7. tor 
instance, will cause the detector 25 to provide e signal, whereas the detector 
26 will provide no signal. Passengers leaving the elevator 7, for example, 
b will cause the detector 26 to provide a signet, whereas the detector 25 will 
provide no signal. Thus a signal from the detector 25 indicates passenger 
motion in the entering direction, whereas a signal from the detector 26 
indicates passenger motion in the exiting direction. The detectors 22, 23. 
25. 26 may be used to keep a running count of passengers in the elevator for 
1C dispatching and other purposes, as well as to service the functions of the 
invention |Rg. 3). The detectors 22, 25 will be interconnected with a 
processor disposed within the building by means of the traveling ceble, or 
such other communication medium as is used between the elevators and the 
building. The detectors 23, 26 will be connected by wire or in any other 
IS suitable fashion to the processor. 

Referring to Fig. 3, if hardware associated with the detectors 22. 23 
or 26 sense that there ia passenger movement in the entering direction, an 
entering interrupt 29 will reach a step 30 to increment a P counter, which 
keeps e running count of the passenger population within the elevator car. 
2D And then other programming is reverted to through a return point 31 . 

Similarly, if hardware associated with the detectors 22, 23 or 26 determine 
that there is passenger movement in the exiting direction, an editing interrupt 
32 will reach a step 33 to decrement the P counter. Periodically, the 
programming reaches a count reset routine through an entry point 34 and a 
25 test 35 determines it the elevator is shut down, or not. By that, is meant 

that the elevator is parked with Its doors closed and its motor off. Whenever 
such is the case, an affirmative result of test 35 will reach a step 36 to reset 
the P counter to all zeroes, in order to assure that the elevator will start with 
a correct count when it resumes operation. When the elevator is not shut 
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down, a negative result of test 35 reaches other programming through the 
return point 3 1 . 

Referring to Fig. 4, an exemplary diagram of trip security functions 
which may be performed in order to practice the present invention includes 
5 entrance into a trip security subroutine through an entry point 36. A first 
test 37 determines if a trip alarm has been set. initially, it will not, so a test 
38 will determine if the doors of the elevator axe fully closed or not. If so. 
the remainder of the routine of Fig. 4 is bypassed and other programming is 
reverted to through a return point 39. When the doors are at least partially 
10 open, a negative result of test 38 reaches a test 40 to see if a timing delay, 
described hereinafter, is underway or not. Initially it will not be. so a test 41 
determines it this is a secure trip or not. If not, the remainder of Fig. 4 is 
bypassed through return point 39. But if it is a secure trip, the routine 
continues with a step 42 which sets a security stop flag that will interact 
15 with the safety chain of the elevator and absolutely prevent if from running, 
unless the flag is subsequently reset. This provides the security feature of 
not allowing the elevator to run unless all the passengers thereon are 
authorized for the particular secure trip involved. Then, passenger IDs are 
polled, in e subroutine 43, a step 44 sets a value, I, equal to the number of 
20 IDs that responded, and the IDs of the passengers are checked in a 

subroutine 45 to see if they are authorized to make the particular trip (which 
mBy be defined as the particular elevator at a particular time of day, or in 
some otheT fashion}. If not all of the passengers are authorized for the trip, a 
negative result of a test 46 will reach a step 49 to force the door open 
2S {whether or not it is open), and a step 50 to make an announcement that 
there are unauthorized persons on the elevator, hopefully to cause someone 
who innocently entered the elevator by mistake to leave the elevator. 
Following the announcement, a test 51 determines if a timing interval is 
underway or not- Initially it will not be. so a negative result of test 51 
30 reaches a step 52 to initiate the interval timer and a step 53 to set the timing 

- 5 - 
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latch to indicate lhat the timing imorval is now underway. Then other 
programming is reached through the return point 39. 

In the next pass through tha routine of Fig. 4, results of tests 37 and 
38 will be negative, and this lime test 40 will be affirmative reaching a test 
S 55 to determine if the time interval has timed out or not. If not. the 

passengers are once again polled and checked in the subroutines 43 and 45 
and if there still are unauthorized persons on board, a negative result of test 
46 causes step 50 to again make the announcement about unauthorized 
passengers. In a typical system, the announcement will take more time then 

10 it takes to repetitively reach the routine of Fig. 4 in the processor, so thar the 
announcement process will simply be reinforced to repeat the announcement 
until it is cancelled, thereby rendering the step 50 to be redundant in 
subsequent passes. The test 61 will be affirmative this time, so that the 
steps 52 end 53 are bypassed as other programming is reached through the 

15 return point 39. This process may continue through an affirmative result of 
test 40, a negative result of test 55. a negative result of test 46 and an 
affirmative result of test 51, until either all unauthorized passengers leave the 
elevator car or the interval timer times out. Assuming the interval timer 
times out, a pass through the routine of Fig. 4 will find affirmative results of 

2C test 40 and test 55, causing a step 56 to set a trip alarm, which will leave 
the elevator with the security stop flag set. thus interrupting the safety chain 
and causing the elevator to remain where it is, while the alarm condition 
continues. Steps 57 and 58 may store the unauthorized IDs, and the 
difference between the number of passengers and the number of IDs, thus 

25 indicating why the alarm was set. and a step 59 resets the timing interval 
flag. Subsequent passes through the routine of Fig. 4 will pass through an 
affirmative result of test 37, and a negative result of a test 60 will cause all 
of the routine to be bypessed, preserving the status quo until security 
personnel take charge. When a trip alarm reset button is pressed, the alarm 

>G condition is reset in a step 61 . 
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Assume that any unauthorized ID passenger has left the elevator car, 
in a subsequent pass through the routine of Fig. 4, an affirmative result of 
test 46 will reach a test 64 to see if the passenger count exceeds the 
number of IDs. If so, an affirmative result of test 64 triggers all the functions 
5 referred to hereinbefore with respect to a negative result of test 46. If no 
unknown persons are on board, a negative result of test 64 reaches a step 
65 which resets the timing interval flag utilized in tests 40 and 51. which 
may be redundant if no unauthorized passengers had been present in the first 
place. A step 66 resets the security stop which allows the elevator car to 

10 move, and a step 62 will cancel the announcement, either to cause the 
announcement to cease if one is being made, or redundantly if no 
unauthorized passengers had been on board the elevator. A step 63 will 
reset the force door open flag, to indicate to the conventional door close 
routine that the security check has been successfully completed, and the 

IS door close routine may commence. 

The functions illustrated in Fig. 4 will continue to be performed so 
long as the doors are not fully closed. Thus, shou/d a passenger enter the 
elevator at the last minute, the step 42 will again set the security stop flag. 
And as described hereinbefore, the routine will attempt to cause the 

20 passenger to leave in a period of time, or will end up causing the alarm to be 
set with the security stop flag in place, immobili2ing the elevator. 

In Fig. 5, a floor security routine is reached through an entry point 67 
and a first test 68 determines if the doors are fully closed or not. If they are, 
that means there can be no change in passenger population, so an affirmative 

25 result of test 68 reaches a subroutine 69 to poll the passenger IDs. Then a 
step 70 stores a list of the responding IDs, a step 72 sets a number, I, equal 
to the number of IDs determined in the poll, a step 73 sets a number, U, 
equal to P-J, so that U represents the number of unknown passengers in the 
car, and a step 74 sets a number. N, equal to the current population of 
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passengers, P. in the cer. Then other programming is reverted to through a 
return point 76. 

In a subsequent pass through the routine of Fig. 5. if the doors are 

even partially open, a negative result of test 68 will reach e test 77 to 
» determine H the floor of the car (C) is a secure floor or not. If not, all of the 

other functions in Fig. 5 are bypassed and other programming is reached 

through the return point 76. But if the floor is secure, a test 78 determines if 

the number of passengers. N, in the cer et the time it reached the floor is 

larger than the current number of passengers, P, thereby indicating e 
1 0 decrement in the passenger count. If so, a subroutine 79 will poll all of the 

portable devices of the passengers within the car to determine their IDs, e 

step BOa sets I equal to the present number of IDs in the car, and a 

subroutine 80a will provide en exit security check, to compare the 

passengers presently In the elevator with e fist of passengers meds during 
15 the trip in subroutine 69 to determine whether the passengers with IDs who 

are now messing are all on the list of authorized passengers for the particular 

floor at which the elevator is stopped. Then a test 81 determines if all of the 

exited passengers were authorized; if not. a step 82 will store the IDs of 

those unauthorized persons who have exited. Then a step 83 will lock all 
?.C doors on the floor, a step 84 will notify security and a step 85 will cause an 

alarm to be set. If desired, in order to not warn the unauthorized passengers 

that they have been detected, setting of the alerm may not include sounding 

an audible alarm, if desired. 

On the other hand. If all of the passengers with IDs who exited were 
25 authorized, an affirmative result of test 81 will bypass steps 82-85. Whether - J 

or not any passengers with IDs made unauthorized exits onto the secure 

floor, a test also has to be made to see if any unknown passengers (not 

having IDs) may have exited onto the secure floor. Therefore, a test 88 

determines if the present total number of passengers, P, minus the present 
30 number of passengers who bear IDs, I, minus the number of original 
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unidentified passengers, U. is less than zero. This will occur only if the 
unidentified passenger count has decreased after the car reached the floor. If 
this count is not less than zero, a negative result of test 83 will bypass the 
remainder of the routine, through the return point 76. This is true whether or 
5 not the alarm may already be set. On the other hand, if an unidentified 

person has left the elevator on the secure floor, an affirmative result of test 
88 reaches a step 90 to store the count of unidentified persons who have left 
the elevator car, and a test 83 determines if the floor alarm has been set yet 
or not. If it has, there is no point in performing the functions of steps 83-85 

10 again so an affirmative result of test 93 bypasses the rest of the program 
through the return point 76. However, if no unauthorized passengers with 
IDs have been detected as leaving the elevator, the floor alarm will not have 
been set in step 85 so a negative result of step 93 causes a series of steps 
95-97 to lock the doors, notify security, and set the floor alarm. If there has 

1 5 been no decrement in the passenger count, a negative result of test 78 
bypasses the steps and tests 79-97. If the car is not stopped st a secure 
floor, ail of the steps and tests 77-97 are bypassed by a negative result of 
test 77. 

The description with respect to Figs. 3-5 is illustrative, merely, there 
20 being a wide variety of manners in which to utilize the present invention. 

The aforementioned patent application is incorporated herein by 
reference. 

Thus, although the invention has been shown and described with 
respect to exemplary embodiments thereof, it should be understood by those 
25 skilled in the art that the foregoing and various other changes, omissions and 
additions may be made therein and thereto, without departing from the spirit 
and scope of the invention. I claim: 
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What is Claimed Is: 

1 I . An elevator security system comprising: 

2 directional motion detection apparatus disposed, with on elevator car 

3 parked at a landing with its door open, at the access between said landing 

4 and said car, said detection apparatus providing a continuous count of 

5 passenger population aboard said elevator car; 

<S a plurality of portable identification number CIO) transmitting devices, 

7 each borne by a corresponding passenger, each for transmitting an 10 signal 

8 in said elevator car to thereby identify the corresponding passenger; and 

9 signal processing means responsive, with said car at a secure floor, 

10 to said count indicating a decrement of said passenger population and to said 

11 ID signals for determining whether passengers who have left said car have 

12 IDs designated as euthorized to enter the floor at which said car is stopped, 

13 and for performing one or more of locking doors on said floor, notifying 
l«i security personnel, and setting an alarm condition unless all of said one or 
15 more passengers are so authorized. 

1 2. A system according to claim 1 wherein: 

2 said signal processing means comprises means for counting the 

3 number of said IDs among the passengers of said population prior to reaching 

4 said secure floor and for concurrently compering it with said passenger count 

5 to determine the original number, if any, of unknown passengers aboard sDid 

6 car, and subsequently, with said car at said secure floor, determining if the 

7 present total passenger count, minus the present number of IDs, minus said 
a original number of unknown passengers is less than zero, and if so, 

S performing one or more of locking doors on said floor, notifying security 

10 personnel, and setting an alarm condition. 

3 3. A system according to claim T wherein said signal processing 

2 means comprises means for sounding an alarm in the event 

• 10 - 
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3 thai an unauthorized passenger exils said car at a secure 

4 floor. 

1 4. A system according to claim 1 wherein said directional motion 

2 detection apparatus comprises at least one motion detector disposed on said 

3 car and st least one motion detector disposed on said landing. 

3 5. A system according to claim 1 wherein said directional motion 

2 detection apparatus comprises a doppler motion detector. 

1 6. A system according to claim 5 wherein said doppler motion 

2 detector is disposed on said car. 

1 7. An elevator security system comprising: 

2 directional motion detection apparatus disposed, with an elevator car 

3 parked at a landing with its door open, at the access between said landing 

4 and said car, said detection apparatus providing a continuous count ot 

5 passenger population aboard said devator car; 

S a plurality ol portable identification number 0D> transmitting devices, 

7 each borne by a corresponding passenger, eech for transmitting an ID signal 

8 in said elevator car to thereby identity the corresponding passenger; and 

9 signal processing means responsive to said count and to said IDs for 



10 determining, when said car is at a landing wfth its doors not fully closed, if 

11 each waiting passenger in said car is authorized to make a trip in said car, for 

12 comparing the number of said IDs to said count to thereby determine if 

13 unknown passengers are aboard said car, and for interrupting the safety 

14 chain of said elevator car, thereby to prevent it from running unless all of said 

15 waiting passengers are authorized to make said trip. 

i 8. An elevator security system comprising: 

- 11 - 
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2 directional motion detection apparatus disposed, with an elevator car 

3 perked at a landing with its door open, et the access between said landing 

4 and said car. said detection apparatus providing a continuous count of 

5 passenger population aboard said elevator car; 

6 a plurality of portable identification number (ID) transmitting devices. 

7 each borne by a corresponding passenger, each for transmitting an ID signal 

8 In said elevator car to thereby identify the corresponding passenger; end 

9 signal processing means responsive, with said car at a secure floor.. 



10 to said count indicating a decrement of said passenger population and to said 

12 ID signals for determining whether passengers who have left said car have 

12 IDs designated as authorized to enter the floor at which said car is stopped. 

13 and for performing one or more of locking doors on said floor, notifying 

14 security personnel, end setting an alarm condition unless all of said one or 

15 more passengers are so authorized, said signal processing means responsive 

16 to said count and to said IDs for determining, when said car is at a landing 

17 with its doors not fully closed, if each waiting passenger in said car is 

18 authorized to make a trip in said car, for comparing the number of said IDs to 

19 said count to thereby determine if unknown passengers are aboard said car, 
2C and for interrupting the safety chain of said elevator car, thereby to prevent it 

21 from running unless all of said waiting passengers ere authorized to make 

22 said trip. 

: 9. A method of securing an elevator landing, comprising: 



2 (a) providing each regular passenger with a portable device which 

3 transmits an ID assigned to the corresponding passenger; 

4 (b) determining the ID of each regular traveling passenger in an 

5 elevator car prior to reaching said landing; 

6 <c) determining the ID of each remaining passenger in said car 

7 after a passenger has left said car at said landing; 
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8 td) comparing said remaining passenger IDs with said IDs of said 

9 regular traveling passengers, thereby to determine the ID of any regular 

10 traveling passenger that left said car at said landing; 

11 (e) sensing the motion of passengers entering and exiting from 

12 said car and providing a continuous count of the passenger population aboard 

1 3 said car; 

14 <fJ comparing the count of population aboard said car prior to 

15 reaching said landing with the count of population aboard said car when said 
is car is at said landing to determine the number of passengers that have left 
17 said car at said landing; and 

IB (g) determining whether any said passenger that left said car at 

19 said landing is unauthorized to enter upon said landing, and if so, performing 

20 one or more of locking doors on said floor, notifying security personnel, and 

21 setting an alarm condition. 

1 10. A method according to claim 9 wherein said step (g} includes 

2 sounding an aiarm. 

1 11. A system according to claim 9 wherein said step {e) is 

2 performed by apparatus comprising at least one motion detector disposed on 

3 said car and at least ons motion detector disposed on said landing. 

1 12. A system according to claim 9 wherein said directional motion 

2 detection apparatus comprises a doppier motion detector. 

3 13. A method of providing elevator security, comprising: (a) 

2 providing each reguler passenger with a portable device which 

3 transmits an ID assigned to the corresponding passenger; 

4 <b) determining the ID of each regular traveling passenger in an 

5 elevator car prior to reaching said landing; 

- 13 - 
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6 (c) determining the ID of each remaining passenger in said car 

7 after a passenger has left said car et said landing; 

8 {d) compering said remaining passenger IDs with said IDs of said 

9 regular traveling passengers, thereby to determine the 10 of any regular 

10 traveling passenger that left said car at said landing; 

11 (e) sensing the motion of passengers entering and exiting from 

12 said cur end providing a continuous count of the passenger population aboard 

13 said car; 

14 (f) comparing the count of population aboard said car prior to 

15 reaching said landing with ths count of population aboard said car when said 
IS car is at said landing to determine the number of passengers that have left 

1 7 said car at said landing; 

18 (g) determining whether any said passenger that left said car at 

19 said landing is unauthorized to enter upon said landing, and if so. performing 
2D onB or more of locking doors on said floor, notifying security personnel, and 

21 setting an aiarm condition; 

22 (hi comparing the count of population aboard said car prior to 

23 leaving a landing on a trip with the number of passengers aboard said car 

24 having IDs to determine if any unknown passengers are aboard said car; 

25 (i> determining the ID of each passenger in an elevator car prior 
25 to leaving a landing on a trip; end 

2 7 (j) determining from said count and from said IDs if any 

28 passenger aboard said car is unauthorized to make said trip, and if so. 

29 preventing said car from running on said trip. 

1 14. A method of elevator security, comprising: 

2 (a) providing each regular passenger with a portable device which 

3 transmits an ID assigned to the corresponding passenger; 

< lb) determining the ID of each passenger in an elevator car prior 

3 to leaving a landing on a trip; 
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6 (c) comparing the count of population aboard said car prior to 

1 leaving a landing on a trip with the number of passengers aboard said car 

8 having IDs to determine if any unknown passengers are aboard said car; and 

9 (d) determining from said count and from said IDs if any 

10 passenger aboard said car is unauthorized to make said trip, and if so. 

11 preventing said car from running on said trip, 
12 
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